@TCloud  You can follow the below steps: Login to Cloudera Manager -> Zookeeper- -> Configuration - Java Configuration Options for Zookeeper Server Add below in the text box: -Dzookeeper.security.auth_to_local=RULE:<rule format>   Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button. ... View more

@Mohan50    This should be the oozie sharelib path on HDFS. Default path:  /user/oozie/share/lib/ in HDFS You can check the same under oozie configuration on cloudera manager. ... View more

@Mohan50    Have you configured oozie libpath in the workflow? If not, please add the  ojdbc7.jar under  /user/oozie/share/lib/ in HDFS and retry execution.   Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.       ... View more

@AndyTech    Please refer link [1] for installation guide of required hive JDBC connector. It contains steps for driver configuration on windows. [1] https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/hive_jdbc_odbc_driver_install.html#hive_installing_jdbc_odbc_drivers   You can refer connector documentation from the below link www.cloudera.com/downloads/connectors/hive/jdbc/2-5-20.html. ... View more

@Siddo  You can migrate the Hue DB. Refer doc to migrate Hue DB https://docs.cloudera.com/documentation/enterprise/6/latest/topics/hue_dbs_migrate.html#hue_dbs_migrate Manually migrating queries from tables would be complex and not tested completely. It has the below requirement: The Hue database has a "desktop_document2" table that stores all the saved queries and Oozie workflows and all sorts of users' saved stuff (query history included). This table has an OWNER_ID column that is a foreign key to the auth_user table's ID column. The process of getting the new ID of the "auth_user" table, and associating them with the correct "owner_id" in the "desktop_document2" table, can be very involved. ... View more

@Siddo    Do you mean saved queries are not available in hue 4 but present in hue 3.9 version? Have you recently upgraded the cluster? What is the CDH version here?   Go to "http[s]://<huehost>:<hueport>/home"  or click the house icon in the upper left corner in hue.  After this recheck if the saved queries are visible.   ... View more

@sow    What is the mysql DB version being used here? Does this only support TLSV1 ? You should consider upgrading the DB to the latest supported TLS versions. TLSV1 is included in the disabled algorithms in the latest java versions by default . The option of disabling the algorithms from java.security hence works in the particular host once you update the java.security file. This is the only workaround here but not recommended since TLSv1 is deprecated.   Ref: https://dev.mysql.com/doc/refman/5.7/en/encrypted-connection-protocols-ciphers.html   ... View more

@sow    Sqoop does not currently support TLS/SSL to Oracle, MySQL, or other databases. Refer:https://docs.cloudera.com/documentation/enterprise/5-14-x/topics/cm_sg_hadoop_ssl_cm.html ... View more

@srinu    Sentry permissions can be configured through  GRANT  and  REVOKE  statements issued either interactively via Hue or programmatically through the HiveServer2 SQL command line interface, Beeline (documentation available  here ).    The   GRANT ROLE   statement can be used to grant roles to groups. Only Sentry admin users can grant roles to a group. Execute below hive query as sentry admin. GRANT ROLE <role name> [, <role name>] TO GROUP <group name> [,GROUP <group name>]   Refer link for more details: https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/sg_hive_sql.html#concept_c2q_4qx_p4   Hope this helps, Paras   Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button. ... View more

@srinivassrinu01    Is  the curl command output from your cloudera-scm-server host returning proper response? # curl http://archive.cloudera.com/cm5/redhat/7/x86_64/cm/5/repodata/repomd.xml # ping archive.cloudera.com   If the commands do not fetch proper results, you should check for firewall restrictions blocking access to the port and other network configurations on the CM server. ... View more

@Anil  Cloudera Navigator Key Trustee Server and KMS both require a valid Cloudera Enterprise license,  they’re not distributed through the public Cloudera Manager yum repository.  They must be downloaded directly from Cloudera’s website. These should then be made available for installation by copying them to a temporary directory on the Cloudera Manager server. You must create an internal repository to install or upgrade the Cloudera Navigator data encryption components.    Refer link:  https://docs.cloudera.com/documentation/enterprise/latest/topics/key_trustee_install.html#xd_583c10bfdbd326ba-590cb1d1-149e9ca9886--7b84 ... View more

Hi @HKG    Have you created cloudera-scm user with sudo privileges ? Please create the user if this does not exist. Is this CM installation using installer.bin? ... View more

An easier approach would be to change timezone of your service monitor host/CM server. You can follow the same steps to have the same timezone as the Impala daemon nodes. Restart the Cm server for changes to take effect on the CM web UI ... View more

@slowrocket    There is perhaps a difference in localtime configured in your impala daemon nodes and management service nodes which is causing these issues.   You can change the system localtime on the impala daemons hosts using below steps:  1) delete the /etc/localtime file. 2) Link the time CET the /usr/share/zoneinfo folder to /etc/localtime with this command: #ln -s /usr/share/zoneinfo/ CET /etc/localtime   2.a) If you don't want to link it you can copy and rename it to localtime: #cp /usr/share/zoneinfo/ CET /etc/localtime After you did this on the hosts where the timezone is wrong, please execute the queries and check if there are still discrepancies observed ... View more

Log messages show that chrony loses synchronisation frequently.   Are you also able to reach server i psap01.ecb.de during the time of the issue? The last received values seem to be higher as compared to the other available server. Please compare the performance with servers configured on other hosts which do not report the issue. Check with your network/OS team on the server availability and to make time synchronization stable on the hosts     ... View more

Hi @Shriniwas    Please refer our installation guide [1] and review the steps performed so far. I would suggest to review the steps under document [2] to ensure the environment is correctly setup before installation. Configure Network Names Disabling the Firewall Setting SELinux mode Enable an NTP Service Install Python 2.7 on Hue Hosts [1] https://docs.cloudera.com/documentation/enterprise/latest/topics/installation.html   [2] https://docs.cloudera.com/documentation/enterprise/latest/topics/installation.html#install_cm_cdh ... View more

What is the curl output to the namenode web UI? curl -k "<namenode web UI address>" ... View more

What is the error? Please share the snapshot Did you restart the cluster services post disabling kerberos? Are you able to fetch curl output to the namenode web UI? curl -k "<namenode web UI address>"   Previous output does show established connections from  10.49.70.13. Please check if 50070 is the port for namenode web UI.     ... View more

Could you please check your code once as the referenced file M1.txt is a local path file whereas the command arguments show iinput hdfs path. ... View more

To disable the SPNEGO authentication for the Hadoop services, modify the following properties related to the service    Ambari Web > Services > HDFS > Configs >  Advanced core-site: hadoop.http.authentication.simple.anonymous.allowed = true hadoop.http.authentication.type = simple    It will require the dependent / affected services to be restarted. ... View more

Yes, you can follow below steps to disable SPNEGO authentication From the Clusters tab, select the service (HDFS, MapReduce, or YARN) for which you want to disable authentication. Click the Configuration tab. Under the Scope filter, click service_name (Service-Wide). Under the Category filter, click Security to display the security configuration options. In the Enable Kerberos Authentication for HTTP Web-Consoles setting, uncheck the box to disable authentication requirement for the selected service_name (Service-Wide). Click Save Changes to save the change.  This will require service restart ... View more

For Windows 10, you need to download and install the MIT Kerberos Client: Visit the MIT Kerberos Distribution Page. Download and install (typical installation) the appropriate MIT Kerberos client for Windows - Windows 4.1 64-bit version. The default location of the Kerberos configuration file on Windows machine is "C:\ProgramData\MIT\Kerberos5\krb5.ini" (this is hidden file) Copy the contents from the /etc/krb5.conf file from one of the hosts in the Hadoop cluster (from Linux) into the krb5.ini file on Windows, save the changes and exit. Configure the following environment properties for MIT Kerberos by visiting Control Panel -> System -> Advanced -> Environment Variables on Windows: KRB5_CONFIG: Path of the Kerberos ini file. KRB5CCNAME: Path of the Kerberos credential cache file. Save the changes and reboot the machine. Open MIT Kerberos Ticket Manager and supply the appropriate principal and password to have a valid TGT to authenticate to Kerberos Web Consoles: Configure browser to use SPNEGO to negotiate Kerberos authentication and then try to access the web UI ... View more

What is the windows version being used here? ... View more

httpFS hostname is the hostname of the web UI you want access to. This command is used to map the domain name being used by cluster nodes to the kerberos REALM they belong to.  A specific hostname with domainname can be configured, or all hosts in a domain with a "." before the domain or subdomain.  Eg: C:\Windows\system32>ksetup /addhosttorealmmap .example.com CLUSTER.REALM     It can be run multiple times to add specific domains/hosts to the mapping to the CLUSTER.REALM. ... View more

@saivenkatg55    You should be executing the commands as windows admin user only with corresponding realm and kdc parameters ... View more